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Abstract We consider classical and entanglement-assisted versions of a distributed computation scheme 
that computes nonlinear Boolean functions of a set of input bits supplied by separated parties. Com- 
munication between the parties is restricted to take place through a specific apparatus which enforces 
the constraints that all nonlinear, nonlocal classical logic is performed by a single receiver, and that 
all communication occurs through a limited number of one-bit channels. In the entanglement-assisted 
version, the number of channels required to compute a Boolean function of fixed nonlinearity can become 
exponentially smaller than in the classical version. We demonstrate this exponential enhancement for 
the problem of distributed integer addition. 

Keywords quantum communication complexity • locally nonlinear distributed evaluation • entangle- 
ment • nonlinear Boolean functions 



Contents 

1 Introduction l] 

2 Linear and nonlinear Boolean functions 

3 Locally nonlinear distributed evaluation 3| 

4 Classical restriction on the nonlinearity of locally nonlinear distributed evaluation 3| 

5 Preview of quantum-classical dichotomy in nonlinearity 

6 Classical impossibility of integer addition using locally nonlinear distributed evaluation 

7 Quantum-classical dichotomy in nonlinearity 

8 Conclusion 

9 Acknowledgements 



1 Introduction 



The study of quantum communication complexity [2] [7] [1] has drawn attention to the feasibility using 
quantum protocols of certain classically impossible communication tasks. This is strikingly demonstrated 
by quantum pseudo-telepathy protocols [3]. In quantum pseudo-telepathy, entanglement eliminates the 
classical need for signaling between separated parties collaborating to perform a task. Crucially, while 
entanglement substitutes for signaling in pseudo-telepathy scenarios, it does not itself produce superlu- 
minal signaling [15]. Rather, entanglement and communication are partially interchangeable resources. 
Here we demonstrate a new exponential quantum-classical dichotomy in multi-party communication, 
in which entanglement is partially interchangeable with nonlocal, nonlinear logic. We consider classical 
and entanglement-assisted versions of a distributed computation scheme that allows a single receiver 
to compute nonlinear Boolean functions of a set of input bits supplied by spatially separated senders. 
Communication between all parties is restricted to take place through a specific apparatus which enforces 
the constraints that all nonlinear, nonlocal classical logic is performed by the single receiver, and that 
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the senders communicate only with the receiver through a limited number of linear one-bit channels. In 
the entanglement-assisted version, where local rotations on entangled qubits are performed and where 
the results of local measurements on these qubits can be sent through the linear communication appa- 
ratus, the number of channels required to compute a Boolean function of fixed nonlinearity can become 
exponentially smaller than in the classical version. Our imposed handicap on the communication appa- 
ratus, which limits the amount of communication and prevents the communication process itself from 
introducing nonlinearity into the Boolean function being distributedly evaluated, reveals a key difference 
between the quantum and classical versions of the system: in the quantum version, the nonlinearity index 
of the computable functions can grow exponentially with the number of channels, whereas in the classical 
version it grows linearly. We use the entanglement-assisted version to demonstrate distributed integer 
addition in this setup using exponentially fewer channels than would classically be necessary. 

Although the use of a communication handicap to demonstrate this quantum-classical dichotomy is 
in a sense artificial, the specific communication setup used, which we call locally nonlinear distributed 
evaluation, is quite natural for the purpose of drawing attention to the distinction between linearity and 
nonlinearity in the communication process. In particular, it presents a fixed number of linear combinations 
of the senders' input bits to a receiver capable of executing arbitrary classical nonlinear logic on bits 
locally accessible to her, while preventing the senders and the receiver from performing any extraneous 
communication or nonlocal nonlinear logic. Using this setup, nonlinearity in the communication process 
can be precisely quantified in terms of the required number of one-bit channels. For distributed integer 
addition, the required number of channels classically grows as the number of senders, whereas in the 
quantum scenario it grows as the logarithm of the number of senders. Our results should also apply 
to any other communication setup that imposes the same constraints, i.e., the setup must present the 
receiver with a fixed number of linear combinations of the senders' input bits, while preventing any 
further communication between the parties. 

2 Linear and nonlinear Boolean functions 

For Boolean functions y(xo, x±, • ■ • , Xk-i) of k Boolean variables, linearity is defined to be the condition 
that there exist Boolean constants c; and b such that 

y(x , Xi, • ■ • , Xk-i) = c ■ x © ci • xi © • ■ • © Ck-i ■ x k -i © b (1) 

where • denotes AND (product modulo 2) and © denotes XOR (sum modulo 2). Here linearity and 
affinity are treated as synonymous. On the other hand, an arbitrary Boolean function / of k bits is a 
polynomial of degree < k in its inputs, with coefficients in the set {0, 1}, addition given by © (XOR) 
and multiplication given by AND. 

f(x ,--- ,Xk-i) = 
[A © A ■ x © Ai ■ x x © • ■ • © A fe _i • Xk-i] 

© 

{Aqi ■ X ■ Xi ® A 02 ■ X ■ X 2 © • • • © A k -ik-2 • Xk-l ■ x k - 2 ) (2) 

© 
© 

(A)12-/s-l -X - Xi ■ • -Xfc-i) 

In this expression, brackets are placed around the linear part of the general function, while the nonlinear 
parts are put in parenthesis. Note that some of the coefficients Aijk... may be zero. This way of writing 
an arbitrary Boolean function as a polynomial is known as the algebraic normal form, or Zhegalkin 
polynomial. A crucial concept is the order of nonlinearity of a Boolean function. The order of nonlinearity 
is sometimes called the algebraic degree. 

Definition 1 Order of nonlinearity O(f) of a Boolean function /: the order of nonlinearity 0(f) 
of a Boolean function / is the degree of its Zhegalkin polynomial. In other words, O(f) is the maximum 
number of input bits combined in a multi-way AND statement with non-zero coefficient in the algebraic 
normal form representation ([2]) of /. 
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Fig. 1 Locally nonlinear distributed evaluation uses a linear, unidirectional communication bus with a fixed 
number of one-bit channels. In this example, there are three senders (Alice, Bob and Charlie) and two channels. Each 
channel can carry only one bit to the receiver Olga. The symbol © indicates a classical CNOT. Note the appearance of 
the four types of bits in this setup: input bits, sent bits, received bits and output bits. 

For example, the function /(a, b,c,d) = b-d(&a-c®a-b-d has 0(f) = 3. It will be of no surprise 
that Boolean functions with orders of nonlinearity < 1 are called linear (0(f) = implies that / is a 
constant), and that Boolean functions with orders of nonlinearity > 1 are called nonlinear. Nonlinear 
Boolean functions have algebraic normal form representations that contain at least a two-way AND 
statement. We say that a function / with order of nonlinearity 0(f) — n is n-nonlinear. Nonlinear 
Boolean functions are essential for computation, since any family of classical logic gates generating a 
Turing universal circuit model of computation must contain at least one nonlinear gate, such as AND 
or OR (xORy = xANDy = x © y ® x ■ y). 

3 Locally nonlinear distributed evaluation 

In the sections that follow, we consider a distributed computation scheme with the following properties, 
which define the notion of a locally nonlinear distributed evaluation. We call the scheme locally nonlinear 
because all nonlinear classical logic is performed locally, by a single receiver. 

Definition 2 Locally nonlinear distributed evaluation 

1. Senders: There are N senders (Alice, Bob, Charlie, ...), each possessing one bit from a collection of 
N bits 

X ,Xi, . . . ,X N -i 

The senders' possessed bits xq,x\, . . . ,xn-i are called input bits for short. 

2. Receiver: There is one receiver, Olga. 

3. Linear, unidirectional communication bus: As shown in Figure [TJ each sender may upload 
one single bit (vertical lines) to each of a fixed number m of separate single-bit channels (horizontal 
lines) which reach Olga. The uploaded bits are called sent bits to distinguish them from the senders' 
input bits. The m bits that Olga receives from the channels are called received bits to distinguish 
them from sent bits and input bits. The uploading process is linear, relying only on the XOR (i.e., 
CNOT) operation: the channels are initialized to zero, and if the value of a channel is v before the 
i th sender uploads a bit a, to it, then the value of the channel after the i th sender's upload is v © a,. 
The value that Olga receives from the channel is then a; — oq © 02 © • • • © ajv-i. 

4. Separation of the senders: The value of a sent bit aj from the i th sender does not depend on the 
values of the other senders' input bits {xk\k ^ i}. To fix ideas, we may assume that each sender has 
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access only to the value of her own input bit and not to the values of the other senders' input bits. In 
particular, we may assume that the senders are mutually spacelike separated at the events at which 
they choose their input bits, and that they do not communicate with one another subsequently. The 
local realism of classical physics requires that, in a classical locally nonlinear distributed evaluation, 
Q>i = Pi{xi), where x\ is the i th sender's input bit and pi is some deterministic one-bit Boolean 
function of one bit. The function pi varies, in general, from channel to channel, and from sender to 
sender. On the other hand, in an entanglement-assisted locally nonlinear distributed evaluation, ai 
may be a random bit obtained from the outcome of a quantum measurement on a qubit local to 
the i th sender and entangled with qubits local to the other senders; otherwise the structure of the 
communication bus is the same in the entanglement-assisted case. Importantly, the uploading process 
is unidirectional: the senders do not receive (download) any information from the channels, but only 
upload single bits using the © operation. 
5. Local nonlinear computation by the receiver: Olga's goal is to compute a sequence of to output 
bits 

2/0,2/1, ■ ■ ■ ,2/m-l 

which arc functions of the senders' input bits, using only the m received bits that she receives from 
the to channels. The overall accomplishment of the group is thus that Olga determines 
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Sometimes we will focus on only one of the bits y q computed by Olga, treating it as a function of 
the senders' input bits. The bits that Olga computes are called output bits, and it is important to 
distinguish them from input bits, sent bits and received bits. 



4 Classical restriction on the nonlinearity of locally nonlinear distributed evaluation 



In a classical world, the requirement that each sender has access only to her own input bit implies that 



the bit a, uploaded by the i th sender to the j th channel must be a function of her input bit, and not 
of the other senders' input bits. Thus, — (cjj • xi) ffi bji for some Boolean constants Cji and bji. Even 
if an input a, is chosen "stochastically," it can be treated as a deterministic function of Xi in any given 
instance; this is tantamount to the assumption of "local realism" in classical physics. Olga thus receives 
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where h is an arbitrary Boolean function computed locally by Olga, the Cj are constant Boolean row 
vectors Cj = [cjo c,i • • • Cj(jv-i) ] , is a constant Boolean matrix and to is the number of channels. 
This leads to the following lemma. 

Lemma 1 Classical bound on the nonlinearity of a locally nonlinear distributed evaluation 

In a locally nonlinear distributed evaluation with m channels, Olga's output y q , as given in must 
have order of nonlinearity < m as a function of the senders' input bits. 

Proof The Boolean function ft, in ((J) is a function of only m arguments, namely the m received bits which 
Olga receives from the m channels. Each such received bit is a linear function of the senders' input bits 
Xi. A Boolean function of m arguments can have order of nonlinearity at most to. Therefore h can, in 
the algebraic normal form representation, combine its arguments in at most an m-way AND statement. 
Since each argument of h contains only terms linear in the Xi, distributing AND over XOR produces 
an expression with at most to- way ANDs of the x\. The reduction of this expression to algebraic normal 
form merely deletes conjunctions whose constant coefficients are (e.g., • x\ ■ xi ■ x^ — > 0), and eliminates 
repeated instances of a single variable in conjunctions (e.g., x\ ■ 23 • x\ — ► x\ ■ X3), and therefore preserves 
this property. 
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5 Preview of quantum-classical dichotomy in nonlinearity 

We will show that in an entanglement-assisted locally nonlinear distributed evaluation with m channels, 
Olga's outputs y q can be 2 m_1 -nonlincar in the senders' input bits. This is an exponential enhancement in 
the ability of entanglement-assisted locally nonlinear distributed evaluations to evaluate highly nonlinear 
Boolean functions, as compared to classical locally nonlinear distributed evaluations, which are limited 
by Lemma [TJ to output bits that are at most m-nonlinear. This quantum-classical dichotomy will be 
the central result of this paper. 



6 Classical impossibility of integer addition using locally nonlinear distributed evaluation 

To establish our quantum-classical dichotomy in nonlinearity, we now turn to a specific example: the 
problem of implementing integer addition using a locally nonlinear distributed evaluation. Contrary to 
appearances, the computation of the bits of the result of the integer addition of a series of bits, in contrast 
to the addition modulo-2, is a nonlinear Boolean computation. 

Definition 3 Locally nonlinear distributed integer addition 

A locally nonlinear distributed evaluation implements binary integer addition if Olga's outputs y q are 
the binary digits s q the sum of the senders input bits, defined by 

5 = E^ = E 2 % ( 5 ) 

Note that S is a non-negative natural number. If there are N senders, note that the binary representation 
of the sum ([5]) of the senders' input bits can be given recursively as 

so = S'(mod2) = xq © 
'S-2°s 

si 



S2 = 



2 1 

S - 2 1 s x - 2% 
2« 




(6) 



It is easy to verify that all the bits Sj of the integer sum, S, except for the least significant bit Sq, are 
nonlinear Boolean functions of the x t . In particular, the bit s q is 2 9 -nonlinear, since its algebraic normal 
form as a function of the xi can be written as 

s g = [AND statements of length 2 q with no repeated variables or redundant permutations] (7) 

e 

For example, for the addition of three bits a, b and c we have a two-bit output sq — a © b © c and 
Si = a ■ b © b ■ c © a ■ c, while for the addition of four bit a, 6, c and d we have sq = affifeffieffid, 
s\ = a-b(Bb- c©c • d(Ba ■ c©a • d(Bb ■ d and S2 = a - b ■ c • d. When there are N senders, the most significant 
bit in the binary representation of the sum of the senders' input bits is sl, where L = [log 2 (-/V)J. Here, 
[rj denotes the integer part ("floor") of a real number r. If A is a power of 2, then sl is just the 
multi-way AND of the senders' input bits, i.e., sl — xq ■ ■ 'Xn-i- 

Thus, the order of nonlinearity of the q th binary digit resulting from integer addition is exponentially 
nonlinear in q. Functions with exponential nonlinearity of this sort cannot be computed efficiently using 
locally nonlinear distributed evaluations, as is proved in the following theorem. 

Theorem 1 Classical restriction on locally nonlinear distributed integer addition: Subject to 
local realism, locally nonlinear distributed integer addition is impossible when the number of channels is 
equal to the number of output bits. 
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Proof By Lemma [TJ Olga's output y q , in a classical locally nonlinear distributed evaluation, is at most 
m-nonlinear. For integer addition with N senders, there are only [log 2 (A^)J + 1 output bits, so 

m= Llog 2 (iV)J +1 

Therefore, a classical locally nonlinear distributed evaluation of integer addition would — if such a protocol 
existed — produce output bits that are at most |_log 2 (./V)J + 1 -nonlinear in the xi. In contrast, correctly 
performing integer addition would require y q to be the function s q from ([7]) , which is 2 9 -nonlinear in the 
Xi. This would exponentially violate Lemma U as q increases from to m — 1 = Llog 2 (^V)J, we will 
eventually have 

2 q >m = Llog 2 (iV)J +1 

so long as N > 2, which violates Lemma [1] In particular, consider the last digit s m _i of the sum: s m _i 
is 2 m_1 -nonlinear in the Xi, and we have 

2 m-l = 2 Llog 2 (A0J > m = Llog 2 (iV)J + 1 

so long as N > 2, with an exponentially growing violation as N increases. Hence, locally nonlinear 
distributed implementations of integer addition are impossible in classical scenarios where the number 
of channels is equal to the number of output bits. 

7 Quantum-classical dichotomy in nonlinearity 

We now show that an entanglement-assisted locally nonlinear distributed evaluation can output the 
binary digits s q in the sum of the senders' input bits, in contrast to the classical case. This leads to the 
following theorem. 

Theorem 2 Quantum-classical dichotomy in nonlinearity: an entanglement- assisted locally non- 
linear distributed evaluation can evaluate Boolean functions with orders of nonlinearity exponentially 
greater than would be achievable in a classical locally nonlinear distributed evaluation with the same 
number of channels. In particular, an entanglement-assisted locally nonlinear distributed evaluation with 
m channels can output the last binary digit s m _i in the sum of the sender's input bits, which is a 2 m ~ 1 - 
nonlinear function of the senders ' input bits. We have already shown, in contrast, that a locally nonlinear 
distributed evaluation with m channels, in a classical world, can output Boolean functions with orders of 
nonlinearity at most m. 

We now proceed to prove Theorem [2] To do so, we describe a quantum protocol for implement- 
ing integer addition via an entanglement-assisted locally nonlinear distributed evaluation, based on the 
recursive formulae (J6j) for a given digit of the sum in terms of less significant digits. 

Our protocol bears close formal relations with several results in the existing literature. Most signifi- 
cantly, it is an extension of the quantum pseudo-telepathy protocol known as Mermin's Parity Game [4]. 
In Mermin's Parity Game, a set of parties, indexed by a number i, each receive single bits Xi. Subject to 
the constraint that ^ Xi is even, they are challenged to produce bits yi such that YlVi = 5 2 x *( m °d 2), 
without any communication occurring among the parties. This is impossible in a classical world, but it 
is achievable with shared entanglement. Although the setup for locally nonlinear distributed evaluation 
is quite different from the symmetric setup of Mermin's Parity Game, our integer addition protocol 
relies crucially on repeated applications of this communication-free, entanglement-assisted operation to 
distributedly check the parity of one half of a distributed sum. Variants of this distributed parity check 
operation have been used to help derive the the maximal detector efficiency below which quantum corre- 
lations become indistinguishable from correlations achievable in local hidden variables models, and the 
minimal amount of superluminal classical communication which would be needed to simulate quantum 
correlations in local hidden variables models [6]. The same distributed parity check operation has also 
been used in the domain of quantum anonymous transmissions [8] . 

Mermin's Parity Game is itself a generalization of Mermin's famous "arguments without inequalities" 
for quantum non-locality [13] [12], which in turn built on the pioneering work of Greenberger, Home and 
Zollinger. These works have given rise to an extensive literature on "XOR games," such as [9] and [5]. 
Such works consider, in scenarios distinct from the present locally nonlinear distributed evaluation setup, 
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the efficiency with which separated parties possessing local bits can generate inputs to linear Boolean 
operations so as to approximate nonlinear Boolean functions of their local bits. The present work can be 
considered as a contribution to this literature using a novel communication setup and quantum protocol. 

Our protocol also bears relations with various quantum voting protocols [11] [17] [10], and can be 
considered to be a quantum voting protocol in and of itself. This stems from the fact that only information 
about the sum of the senders' input bits (i.e., the "tally" of the senders' "votes") is encoded in the globally 
accessible classical variables and quantum states utilized in the protocol. No further information, over 
and above this sum, is encoded that would allow Olga or any of the senders to determine the individual 
values of the senders' input bits. The protocol's reliance on local phase rotations to produce global phase 
changes (see below) is reminiscent of the versatile quantum phase estimation technique, the basis for 
many quantum algorithms [14]. In the phase estimation technique, this effect is used to transfer phases 
between two registers. The recipient register is then processed using an inverse quantum discrete Fourier 
transform. 

Definition 4 Quantum locally nonlinear distributed adder 

The protocol is an entanglement-assisted locally nonlinear distributed evaluation. The scheme is identi- 
cal to that of a classical locally nonlinear distributed evaluation, except that the senders choose their 
sent bits on the basis of local measurements on the constituent qubits of GHZ states shared among 
the senders and Olga. Olga computes the output bits given the received bits using local qubit rota- 
tions and measurements in addition to classical logic. This is in contrast to what occurs in a classical 
locally nonlinear distributed evaluation, wherein each sender chooses her sent bits to be deterministic 
functions of her input bit, and wherein Olga computes the output bits given the received bits using 
only classical logic. 

As introduced before, there are N senders and one receiver, Olga. The i th sender possesses an input bit 

Xi. 

Entanglement resource: Llog 2 (A)J copies of a (JV + l)-qubit GHZ state: |0)® (JV+1) + |i)®( Ar+1 ). One 

qubit from each copy of the GHZ state is given to each sender, and one qubit from each copy of the 

GHZ state is given to Olga. 
Communication resource: There are m = [log 2 (iV)J + 1 one-bit channels of the type shown in 

Figure [1] A non-negative integer q indexes channels. Note that there are as many channels as there 

are bits in the integer sum, 5 1 , but that one fewer GHZ state is used. 
1 Preparation and uploading of the sent bits: Each sender uploads her input bit a;, to channel 

q = 0. The received bit from channel q = is xq © x\ © ■ • ■ © ijv-i. Note that no GHZ state is 

consumed during the use of channel q = 0. 

The procedure for the other channels is less direct. For each channel q = 1, • • • ,m — 1, a separate 
GHZ state is used, and all senders obey the following protocol. 

a Local rotation by senders: The i th sender rotates her qubit in the q th GHZ state about the 
z-axis by an angle 

Xi 

—Tf . __ 

2« 

so that the global state becomes 

i \®(-tf+i) + e i#I>i m®(tf+i) 

Note that in the last expression, the index I is a dummy variable indexing the N senders, 
b Local Hadamard by senders: The i th sender applies the H (Hadamard) gate to her qubit, so 
that the global state becomes 

(|0) + © |0) o , 9a + e*# *><(|0) - © \l) olga 

= £ M + E ® |0} o , 9a + e<* £ " (£ \e Nj ) ~ £ \o Nj )) © |l) OIfl0 (8) 

3 3 3 3 

Here Y]j |ejyj) is the sum over all N-qubit computational basis states with even Hamming weight, 
and ^2 j \°Nj) is the sum over all N-qubit computational basis states with odd Hamming weight. 
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c Local measurement and uploading by senders: Each sender measures her qubit in the com- 
putational basis (z-direction) to obtain a result or 1. These measurement results become the 
sent bits uploaded to channel q. It is useful to distinguish two cases. In Case 1, the senders' mea- 
surements project the subspace spanned by the states of the senders' qubits into a computational 
basis state of even Hamming weight, Olga's received bit from channel q is 0, and the global state 
becomes 

|e*0®(|0> OIffa W*£ x '|l> OJff .) 

for some k. In Case 2, the senders' measurements project the subspace spanned by the states of 
the senders' qubits into a computational basis state of odd Hamming weight, Olga's received bit 
from channel q is 1 and the global state becomes 

\oNk)®m olga -e^^^\l) olga ) 

for some k. 

2 Olga's computation of the output bits: Olga obtains the received bits from each of the m channels. 
For channel q = 0, the senders have merely uploaded their input bits to the channel, the received 
bit is x © x 1 © ■ • • © Xff-i, and Olga simply produces this directly as her output bit y . Note that 
2/0 = s o, the desired least significant bit in the sum of the senders' input bits. Then, addressing each 
of the channels q = 1, • • • , m — 1 in order, Olga performs the following operations using her qubit 
from the corresponding GHZ state. 

a Local rotation by Olga: Olga performs a rotation of her qubit about the z-axis by an angle 

Sp=o ^ P yp 

a a — —it — 

which she computes from her store of previous output bits. In Case 1, the global state becomes 

l^ fe )®(|0W + e^+wE^)| 1)o/g j 

whereas in Case 2 the global state becomes 



\<>Nk) ® (|0) o/gQ " 




Inspecting the expression e^ aq+ ^ ^ x ')^ and comparing with (jfjj), we see that 



Using this simplification, we see that in Case 1, the global state becomes 

M®(|0U, Q + e^|lW, Q ) 
whereas in Case 2 the global state becomes 

l^)®(|0> OIfl a-e i5r "|lW) 

b Local Hadamard by Olga: Olga performs the H operation on her qubit. 

1. If s q = 0, then in Case 1 the global state becomes |ejvfc) © \fyoiga anc ^ m Case 2 the global 
state becomes \oNk) © \l)oiga- 

2. If s q = 1, then in Case 1 the global state becomes \eNk) © \^)oiga anc ^ m Case 2 the global 
state becomes \oNk) © |0) Oi9a . 

c Local measurement and production of the q th output bit by Olga: Olga measures her 
qubit in the computational basis (z-direction), obtaining a result or 1. She computes the XOR 
of the measurement result with the received bit from channel q and records this as the output bit 
V q - 

1. If s q = 0, then in Case 1 the received bit is and Olga's measurement result is and in 
Case 2 the received bit is 1 and Olga's measurement result is 1. In either case y q — = 

OffiO = 1 © 1 = Sg. 
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2. If s q = 1, then in Case 1 the received bit is and Olga's measurement result is 1 and in 
Case 2 the received bit is 1 and Olga's measurement result is 0. In either case y q = 1 = 
0©l = l©0 = s g . 

Therefore Olga's output bit y q faithfully reproduces the desired digit s q of the sum of the senders' 
input bits, and hence this protocol implements a locally nonlinear distributed integer addition! 

In the above protocol, the senders first upload to all m channels before Olga begins performing 
quantum operations. In a second stage, the received bits from all m channels are used by Olga to 
locally compute the output bits. Alternatively, an iterative entanglement-assisted protocol exists which 
accomplishes the same function using the same communication constraints. In the iterative version, both 
the senders and Olga perform local qubit rotations, Hadamards and measurements during each iteration. 
Only one channel and at most one GHZ state are used per iteration (the first iteration requires no GHZ 
state). The iterative version of the protocol produces one correct output bit per iteration and leads to a 
somewhat simpler formal description. The iterative and non-iterative versions are essentially equivalent 
descriptions of a single protocol, due to symmetry with respect to the time-ordering of operations that 
are performed at spacelike separation. We chose to use the above non-iterative description here for ease 
of direct comparison with our description of the general locally nonlinear distributed evaluation scheme, 
in which there is no natural notion of iterative cycles. 

8 Conclusion 

We have described an entanglement-assisted protocol for integer addition which operates subject to the 
same communication handicap as in a classical locally nonlinear distributed evaluation. The output bits 
Vq = s q m the entanglement-assisted protocol can be 2 m_1 -nonlinear Boolean function of the senders' 
input bits, where m is the number of channels, whereas any classical locally nonlinear distributed evalu- 
ation can output bits that are at most m-nonlinear Boolean functions of the senders' input bits. We have 
thus demonstrated an exponential enhancement in the efficiency with which nonlinear Boolean functions 
can be computed in locally nonlinear distributed evaluation protocols that are given access to local ro- 
tations and measurements on maximally-entangled multi-partite quantum states. The quantum protocol 
for locally nonlinear distributed addition with N senders requires fine, non-Clifford group [16], local con- 
trolled state vector rotations on the constituent qubits of a set of (N + l)-qubit GHZ states. A question 
for further research is whether, in more general distributed computations, fine local controlled rotations 
on entangled qubits can enhance the computational power of communication-sparse systems with local 
nonlinear logic linked by linear communication channels. Can exponential or polynomial enhancement 
be obtained for other functions? What determines the enhancement in general? 
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